Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2021-34527

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Description

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 3 May 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.